Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2009-2369

EPSS 1.56% · P82
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-2369

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JPEG file, which triggers a heap-based buffer overflow. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
wxWidgets wxImage::Create()函数整数溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
wxWidgets是一个跨平台的GUI和工具库,允许开发人员使用一个代码库创建Win32、Mac OS X、GTK+等应用。 wxWidgets库的src/common/image.cpp文件的wxImage::Create()函数中存在可导致堆溢出的整数溢出漏洞。如果用户受骗打开了特制的JPEG图形,就可能触发这个溢出,导致执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-2369

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-2369

登录查看更多情报信息。

Same Patch Batch · n/a · 2009-07-08 · 26 CVEs total

CVE-2009-2373Drupal Forum module 跨站脚本攻击漏洞
CVE-2009-2385Fustrate Simple Machines Forum Member Awards 'index.php' SQL注入漏洞
CVE-2009-2384Mathi Brothersoft PEamp a .m3u playlist 缓冲区溢出漏洞
CVE-2009-2383Blogtrafficexchange Related Sites插件BTE_RW_webajax.php SQL注入漏洞
CVE-2009-2382jay-jayx0r phpmyblockchecker admin.php 用户认证及访问控制漏洞
CVE-2009-2381Gizmo5 for Linux MSN Authentication SSL Certificate Validation 安全绕过漏洞
CVE-2009-23804homepages 4images functions.php 跨站脚本攻击漏洞
CVE-2009-2379BIGACE Web CMS 'public/index.php' 远程目录遍历漏洞
CVE-2009-2378jtr jax_formmailer.admin.inc.php 代码注入漏洞
CVE-2009-2377Avax Vector avPreview.ocx控件PrinterName属性缓冲区溢出漏洞
CVE-2009-2376TangoCMS textarea ‘application/libraries/Html.php’跨站脚本攻击漏洞
CVE-2009-2375Photo DVD Maker项目文件解析栈溢出漏洞
CVE-2009-2374Drupal 信任管理问题漏洞
CVE-2009-2360Horde Passwd模块‘passwd/main.php’ 跨站脚本攻击漏洞
CVE-2009-2372Drupal 代码注入漏洞
CVE-2009-2371Drupal Advanced Forum模块权限许可和访问控制漏洞
CVE-2009-2370Drupal Advanced Forum模块跨站脚本攻击漏洞
CVE-2009-2368matteo_ricchetti ss5 未明漏洞
CVE-2009-2367iomega storcenter_pro makecgi-pro 加密强度安全漏洞
CVE-2009-2366datachecknh forumpal login.asp SQL注入漏洞

Showing top 20 of 26 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2009-2369

No comments yet


Leave a comment